$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa File: 8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa (raw, json) Hash identifier: ijVXkMzXpL6lli65bz32VQLP+AJ4IkOljAnV7AMl77I= Subject key identifier: BD:7D:35:AF:79:6A:48:BE:6D:52:24:3B:40:40:3C:96:94:26:35:4C Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285849350EAAFAF42ED89355584100 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 18434 IP address blocks: 147.249.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:aa:fa:f4:2e:d8:93:55:58:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=67f47890-9be8-42c6-8cf1-e47f444ba89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:81:f9:39:39:c7:d6:33:06:0e:9f:74:cb: 05:68:93:6d:4c:8c:b0:c5:38:fa:7c:d7:ac:89:26: ea:2f:ea:0f:51:71:e3:24:10:69:f0:de:97:2a:76: f3:e5:24:13:f4:4f:2a:98:30:1b:b5:2b:68:a4:01: 2e:d9:70:3f:44:86:f7:6d:65:a1:5a:65:be:37:e9: b2:22:19:86:bc:23:eb:ca:49:3e:18:ce:81:8e:fa: da:53:69:21:60:7d:05:4f:f3:6e:b3:e3:84:a3:92: fb:12:e7:4c:17:96:a0:2a:6c:de:a4:e5:2a:41:d2: 0e:07:ee:f6:72:b1:52:e8:0c:5c:c1:d9:9b:e3:f9: d6:ba:43:a5:e0:57:ce:4f:63:33:ea:fd:04:12:6b: 8e:1b:aa:cf:f3:ec:79:cf:2f:99:8e:81:86:21:90: 55:49:a7:97:4e:94:4a:3e:ee:b2:36:f3:7a:36:0b: 02:0c:d2:e8:b6:35:98:80:8f:34:43:57:4f:27:ac: 08:28:0a:f0:d6:fb:85:9c:e5:52:56:93:8d:3b:75: e6:34:f8:45:dd:08:30:c1:e3:bc:c0:4d:b8:18:30: 3f:58:09:f7:72:ba:fb:d2:fe:0f:45:eb:3f:31:39: f0:30:8e:43:c8:3e:7c:82:59:97:82:62:30:9a:4e: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:35:AF:79:6A:48:BE:6D:52:24:3B:40:40:3C:96:94:26:35:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f0:b5:bf:ed:76:8c:b3:38:13:e6:80:d7:a0:45:9b:e3:46: 12:11:77:20:f4:2f:4f:ab:2b:46:5f:2e:74:57:b7:e8:9e:52: e1:64:11:9c:4e:60:a5:b8:d9:82:24:4d:3e:a3:b9:c1:b7:e5: e4:0a:c9:63:91:dd:4d:a8:42:18:62:b8:46:e7:1e:26:53:cd: 90:22:e5:38:00:ac:ee:b3:1f:13:cd:44:ba:fb:70:ed:07:82: ce:64:02:2b:2a:6f:e7:df:9d:2a:6a:8e:13:bb:73:2d:fe:2b: fb:0e:1c:08:aa:d4:96:66:b6:08:7f:ed:e8:fa:a0:10:cc:1d: c5:1c:24:cd:66:fa:ab:c7:3f:72:52:fb:0c:76:1c:2b:9f:ac: 8c:f9:6f:6d:0b:1a:ec:c9:bd:76:af:ad:f7:d7:58:f1:9a:94: f0:78:77:d9:1c:67:e3:e5:c3:60:cf:4e:7d:c0:f0:07:45:5c: 66:82:e8:c9:fe:c6:5d:4f:a8:2d:1e:65:b7:4c:98:b8:b3:18: a5:3a:94:dd:e2:45:0f:5a:d0:29:22:52:fc:0d:1e:4c:38:32: ea:63:3d:ee:22:31:24:68:50:7e:9b:72:c0:17:ce:7b:9c:00: 33:47:2d:5b:e5:51:06:f8:cd:84:da:ff:9b:e4:9e:2b:1a:f6: 64:c9:29:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dqr69C7Yk1VYQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NjdmNDc4OTAtOWJlOC00MmM2LThjZjEtZTQ3ZjQ0NGJhODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijGB+Tk5x9YzBg6fdMsFaJNtTIywxTj6fNes iSbqL+oPUXHjJBBp8N6XKnbz5SQT9E8qmDAbtStopAEu2XA/RIb3bWWhWmW+N+my IhmGvCPrykk+GM6BjvraU2khYH0FT/Nus+OEo5L7EudMF5agKmzepOUqQdIOB+72 crFS6Axcwdmb4/nWukOl4FfOT2Mz6v0EEmuOG6rP8+x5zy+ZjoGGIZBVSaeXTpRK Pu6yNvN6NgsCDNLotjWYgI80Q1dPJ6wIKArw1vuFnOVSVpONO3XmNPhF3QgwweO8 wE24GDA/WAn3crr70v4PRes/MTnwMI5DyD58glmXgmIwmk7svQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL19Na95aki+bVIkO0BAPJaUJjVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOGFjNTJlNmEtYWI3My0z NThhLWJjNmYtZWFiYWJlZDg5ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfwtb/tdoyzOBPmgNegRZvjRhIRdyD0L0+rK0ZfLnRXt+ieUuFkEZxO YKW42YIkTT6jucG35eQKyWOR3U2oQhhiuEbnHiZTzZAi5TgArO6zHxPNRLr7cO0H gs5kAisqb+ffnSpqjhO7cy3+K/sOHAiq1JZmtgh/7ej6oBDMHcUcJM1m+qvHP3JS +wx2HCufrIz5b20LGuzJvXavrffXWPGalPB4d9kcZ+Plw2DPTn3A8AdFXGaC6Mn+ xl1PqC0eZbdMmLizGKU6lN3iRQ9a0CkiUvwNHkw4MupjPe4iMSRoUH6bcsAXznuc ADNHLVvlUQb4zYTa/5vknisa9mTJKYw= -----END CERTIFICATE-----Generated at Sun May 11 11:36:09 2025 by rpki-client